Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa
File: RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa (raw, json)
Hash identifier: 2UgnVxLlLuAenOg0pXBuNFTqN4KE476l2bQbrokLRSM=
Subject key identifier: 44:1B:02:88:32:E8:44:F5:1A:D6:C1:2E:15:B6:8D:D1:6B:0F:F9:60
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 019F8A15DA34E2B16DA82F2F03660B8A47E5
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa
Signing time: Wed 22 Jul 2026 13:48:35 +0000
ROA not before: Wed 22 Jul 2026 13:48:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214379
IP address blocks: 185.126.255.0/24 maxlen: 24
194.4.71.0/24 maxlen: 24
212.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:15:da:34:e2:b1:6d:a8:2f:2f:03:66:0b:8a:47:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Jul 22 13:48:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=441b028832e844f51ad6c12e15b68dd16b0ff960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:69:2c:42:a6:cd:53:61:8b:73:43:60:74:
7d:90:c5:a0:15:27:c7:01:65:9a:b2:c5:8a:a4:e2:
cf:af:0f:b0:3a:2e:77:f9:40:fb:80:0b:be:15:96:
90:48:f6:f6:a9:85:03:78:b7:c3:f2:23:f8:af:87:
f9:e5:c3:e4:f8:3c:77:ee:ba:d2:62:31:5e:04:e5:
7e:34:0b:8c:d9:87:25:a9:f2:37:7d:c9:24:a4:64:
cb:13:2c:5e:5e:2f:5c:49:be:db:14:06:ab:41:d2:
71:9a:f8:47:15:4e:59:d7:37:a8:f8:b4:ce:05:a2:
b3:64:2f:43:bb:b5:e6:69:cc:c1:40:54:01:f3:02:
89:9f:7e:21:57:40:d1:96:35:2a:2d:e4:0f:a5:7e:
7f:3c:26:0d:cf:7a:f9:93:3b:c8:f5:e5:3a:0b:6d:
b1:83:5e:88:d2:e3:f9:b4:77:6d:ac:5c:1d:11:2d:
c8:d3:15:ab:3f:87:1f:d1:84:e8:f1:21:7f:de:6f:
57:66:34:08:a9:71:ac:8e:60:0c:fb:61:9f:48:aa:
6d:64:1c:09:0e:92:50:f6:4d:67:24:7e:06:f6:e8:
85:c5:2f:f5:24:68:5b:47:24:d1:1b:62:c1:bf:ea:
a8:75:37:2b:41:d5:f4:d9:9a:0c:0a:59:cd:dc:f5:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:02:88:32:E8:44:F5:1A:D6:C1:2E:15:B6:8D:D1:6B:0F:F9:60
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.255.0/24
194.4.71.0/24
212.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6e:72:c8:1e:d3:c2:ae:f2:f2:2f:2d:f2:7b:c6:6d:bc:7c:
4c:b2:b7:9c:62:f2:8a:de:cd:1e:ec:b1:63:06:90:9c:38:0c:
36:1a:0d:db:63:b7:1d:02:73:10:66:e8:90:3d:db:30:a1:7f:
84:26:9b:05:49:06:0e:e7:4a:19:2f:ff:1f:8f:c8:53:ff:3d:
d2:48:ad:43:1f:76:b3:d6:83:65:b4:b5:24:b4:a0:f6:44:26:
50:9a:61:1e:eb:75:5f:20:e5:15:7e:3d:e9:a8:ce:a1:c4:f4:
5c:61:e6:22:b8:5f:8c:19:43:ac:bf:d1:a5:74:97:b6:0a:ec:
35:c1:89:45:83:fc:a7:9e:98:98:1d:a3:20:26:a7:a2:d4:9c:
53:05:0c:42:24:03:cf:f2:f8:b6:48:5a:77:10:b9:27:4b:0e:
8d:20:b0:54:2a:a4:2c:0c:5b:59:4f:2f:5f:e8:14:22:cf:3b:
1f:d5:52:00:78:94:be:c1:08:6f:15:cb:0c:66:a1:0c:0a:8e:
0f:57:78:82:d6:c5:bd:91:59:99:21:8b:59:9f:05:63:39:dd:
5a:b3:a5:0e:6b:8b:71:8d:45:45:1a:e0:a1:48:93:ca:1c:fd:
19:75:f2:24:7c:34:59:da:2b:8b:b1:76:96:ae:1f:0d:9b:19:
68:cb:9d:44
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+KFdo04rFtqC8vA2YLikflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjViYWUyNTc3OGJlZWQ4ODgwYzA4ZGYyZDNmMzdmYzM3
YWJjMWUwHhcNMjYwNzIyMTM0ODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDFiMDI4ODMyZTg0NGY1MWFkNmMxMmUxNWI2OGRkMTZiMGZmOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD1pLEKmzVNhi3NDYHR9kMWgFSfH
AWWassWKpOLPrw+wOi53+UD7gAu+FZaQSPb2qYUDeLfD8iP4r4f55cPk+Dx37rrS
YjFeBOV+NAuM2YclqfI3fckkpGTLEyxeXi9cSb7bFAarQdJxmvhHFU5Z1zeo+LTO
BaKzZC9Du7XmaczBQFQB8wKJn34hV0DRljUqLeQPpX5/PCYNz3r5kzvI9eU6C22x
g16I0uP5tHdtrFwdES3I0xWrP4cf0YTo8SF/3m9XZjQIqXGsjmAM+2GfSKptZBwJ
DpJQ9k1nJH4G9uiFxS/1JGhbRyTRG2LBv+qodTcrQdX02ZoMClnN3PWE5wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEQbAogy6ET1GtbBLhW2jdFrD/lgMB8GA1UdIwQY
MBaAFKhluuJXeL7tiIDAjfLT83/DerweMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTkt
MWI2Zjc1MGNmOWEyLzEvUkJzQ2lETG9SUFVhMXNFdUZiYU4wV3NQLVdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi82NDQ0ZDEtNWYwMC00ZTUwLTgwMTktMWI2Zjc1MGNmOWEy
LzEvcUdXNjRsZDR2dTJJZ01DTjh0UHpmOE42dkI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuX7/AwQA
wgRHAwQA1E99MA0GCSqGSIb3DQEBCwUAA4IBAQCBbnLIHtPCrvLyLy3ye8ZtvHxM
srecYvKK3s0e7LFjBpCcOAw2Gg3bY7cdAnMQZuiQPdswoX+EJpsFSQYO50oZL/8f
j8hT/z3SSK1DH3az1oNltLUktKD2RCZQmmEe63VfIOUVfj3pqM6hxPRcYeYiuF+M
GUOsv9GldJe2Cuw1wYlFg/ynnpiYHaMgJqei1JxTBQxCJAPP8vi2SFp3ELknSw6N
ILBUKqQsDFtZTy9f6BQizzsf1VIAeJS+wQhvFcsMZqEMCo4PV3iC1sW9kVmZIYtZ
nwVjOd1as6UOa4txjUVFGuChSJPKHP0ZdfIkfDRZ2iuLsXaWrh8Nmxloy51E
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:29 2026 by rpki-client